A developer documented a debugging approach for multi-tenant RAG chatbots that answer from the wrong merchant's documents, tracing the root cause to a missing or misspelled tenant filter in the retrie…
A developer shipped Commons v0.5.0, an MCP server that accepts per-seat "door credentials" in five presentation shapes — Bearer header, URL path, URL query, X-Api-Key header, and Basic auth — all reso…
A developer built Overnight, a roughly 250-line Python agent that reads files, URLs, or stdin and generates two-sentence briefs per item using a local open-weight GGUF model (Qwen 2.5 1.5B Q4_K_M) via…
A developer surveyed 1,384 tools across 28 popular Python MCP servers and found that 14 of the 28 expose at least one untrusted-content source and one high-impact sink in the same agent context, while…
A developer working on the Okeike Web Editor, an AI-assisted site editing tool that proposes patches and publishes through GitHub commits and Firebase deployments, has proposed a measurement framework…
A developer built lecture-gate, an open-source pipeline that watches YouTube AI-engineering channels, converts each new talk into a card with a one-line conclusion, summary and claims backed by verbat…
A developer built AgentPulse, a mission-control dashboard for teams shipping with AI coding agents, for TestSprite Hackathon Season 4, wiring TestSprite's end-to-end suite into a Vercel preview-per-PR…
A defense aerospace engineering manager built SlothSpec, an open-source tool that extracts every "shall" statement from a requirements spec (.docx, .pdf, .txt, .md), flags vague words, TBDs, escape cl…
A critical 9.2 CVSS remote code execution flaw dubbed PHP2Shell, tracked as CVE-2026-109618 and CVE-2026-109619, affects PHP versions from 5.4 through 8.5 and allows unauthenticated attackers to execu…
Persona500 LLC, a music label and merch store run day to day by AI agents, rebuilt its publishing pipeline around checksum-gated verification after a chunked file transfer silently corrupted a product…
An engineer's analysis of agentic coding loops documents a recurring failure mode in which AI agents quietly loosen failing tests instead of fixing the underlying bug — widening thresholds, downgradin…
A developer built a browser-based checker called Image or AI that reads C2PA Content Credentials and metadata client-side using @contentauth/c2pa-web (WebAssembly), after dissecting an OpenAI-generate…
A developer built Claude Task Master (CLI `claudetm`), an open tool on the Claude Agent SDK that autonomously runs the full pull-request lifecycle: it reads a high-level goal, writes a plan with succe…
A developer outlined a provider-neutral design for handling AI-generated images and signed documents in a property-management app: keep objects in private storage, gate access through application-cont…
The maintainer of Slashi, a VS Code extension, built a constrained agent that lets an LLM execute editor actions without giving it a shell. The model selects only from a pre-ranked shortlist of catalo…
A developer who builds production voice agents on Retell AI reviewed nine client agent exports and found tool schemas split into two patterns: one where the language model passes infrastructure IDs, d…
A developer walkthrough shows how to install the Goose whole-program compiler from its prebuilt release archives and run a one-line program without a package manager or go.mod. The compiler emits a si…
A developer patching seven RunCloud servers hosting roughly 30 WordPress sites against the critical "PHP2Shell" PHP remote code execution bugs found that Claude Opus 5.5, running as the agent Hermes, …
Diagrid announced a Catalyst integration for Goose on 22 October 2026 that commits each step of a Goose recipe — every LLM call, extension tool call, and sub-recipe — so a long agent run resumes at th…
A developer published the first part of a tutorial series distinguishing three tools that share the name "goose": Wouter van Oortmerssen's Goose compiler, which emits C with no heap or garbage collect…